$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f93994c6-3484-3a79-972b-d2b611a7e799.roa File: f93994c6-3484-3a79-972b-d2b611a7e799.roa (raw, json) Hash identifier: BM8arpXPc+XQMzfyWStOzbuSch/4f6A+TS7F+EtxK9M= Subject key identifier: F7:49:2B:63:95:0B:1F:39:8D:72:8F:95:58:82:6A:2E:98:9A:0E:26 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D2644BB415C6E544089291F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f93994c6-3484-3a79-972b-d2b611a7e799.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 30036 IP address blocks: 173.21.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:bb:41:5c:6e:54:40:89:29:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=8fc3da87-d54b-489b-806d-8e83c0e6d670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3a:6e:06:95:75:32:01:80:3e:d8:33:81:be: 95:5b:9c:5a:be:42:d7:91:59:4c:ec:6a:96:fc:90: 90:f1:f9:ab:ec:b8:62:f0:a1:c6:c8:dd:ac:70:ae: 1c:b4:98:9f:da:40:d6:9b:08:0c:f1:62:e9:da:e1: c1:18:49:55:98:71:c1:b0:7d:2f:96:f2:a4:4c:8b: c0:c1:11:8b:dd:7f:d4:ec:b6:f2:66:99:ce:8b:9a: 63:9c:86:d7:d3:0e:39:91:27:f9:d3:a7:5a:8d:73: 79:7e:df:3a:55:cc:cc:6c:22:65:e8:a8:f7:ce:01: 60:bd:ac:8f:0a:46:fb:b9:ca:47:c5:cd:f1:e2:5c: 24:2e:57:ea:a8:eb:19:a1:89:c8:26:98:56:f4:ef: 02:fb:8b:0a:51:6d:66:b7:05:f0:2c:8f:61:42:9e: 2c:49:10:bc:d4:6b:97:29:16:67:80:77:12:5e:e1: e1:65:c1:54:e2:d9:7a:dd:f9:ea:ed:dc:50:c4:a4: 57:16:7c:dd:2c:34:2e:6c:5e:02:6e:be:cc:e5:07: 24:8c:83:d4:0e:9a:f5:a1:eb:27:ce:cb:75:c3:4a: 5e:88:7e:a5:eb:9f:30:4b:87:68:8f:12:96:5e:db: 4b:d2:54:79:64:53:36:84:25:26:fe:50:ea:2d:90: 38:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:49:2B:63:95:0B:1F:39:8D:72:8F:95:58:82:6A:2E:98:9A:0E:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f93994c6-3484-3a79-972b-d2b611a7e799.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:7a:17:56:0d:b9:62:10:a1:98:66:9a:5a:5a:e9:a6:48:91: 7d:3a:61:34:7f:a1:a8:c8:56:49:ab:47:b9:11:ab:c3:f8:73: bb:54:d4:e9:4b:79:73:eb:5f:43:eb:22:12:fc:32:27:ca:cc: 5f:34:09:00:d7:45:c1:d0:98:1d:62:49:82:cb:19:57:29:56: c4:a3:69:db:fd:2a:fb:4f:22:5f:9c:1c:16:77:92:a4:eb:75: c8:75:0b:73:a0:5c:de:3b:aa:94:40:9d:0f:29:25:5c:73:95: 0e:7e:07:26:2e:35:14:92:cf:2b:5e:64:be:e3:cb:85:46:9d: 34:2d:5f:ed:83:bf:8e:b8:df:5a:1a:03:32:d1:d9:92:a1:8f: 4e:30:b7:95:7d:68:6c:fb:1a:be:fd:3e:ed:1e:e3:88:cd:ab: f8:3d:26:ac:1e:eb:f3:d5:9b:bf:1b:13:5c:86:59:2a:c7:c3: 9d:eb:26:61:11:92:90:e7:e5:30:37:8e:59:dd:18:2b:2c:df: 04:74:58:3a:ef:54:a1:7f:ab:39:b5:38:18:f3:08:1a:ce:c3: e3:02:9f:aa:86:97:23:00:85:7e:0a:c2:fd:a7:e7:69:a4:4d: 50:1f:ae:ee:78:42:30:06:a9:5c:60:0d:ec:22:9a:24:61:53: 1f:51:68:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLtBXG5UQIkpH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk OGZjM2RhODctZDU0Yi00ODliLTgwNmQtOGU4M2MwZTZkNjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTpuBpV1MgGAPtgzgb6VW5xavkLXkVlM7GqW /JCQ8fmr7Lhi8KHGyN2scK4ctJif2kDWmwgM8WLp2uHBGElVmHHBsH0vlvKkTIvA wRGL3X/U7LbyZpnOi5pjnIbX0w45kSf506dajXN5ft86VczMbCJl6Kj3zgFgvayP Ckb7ucpHxc3x4lwkLlfqqOsZoYnIJphW9O8C+4sKUW1mtwXwLI9hQp4sSRC81GuX KRZngHcSXuHhZcFU4tl63fnq7dxQxKRXFnzdLDQubF4Cbr7M5QckjIPUDpr1oesn zst1w0peiH6l658wS4dojxKWXttL0lR5ZFM2hCUm/lDqLZA4EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdJK2OVCx85jXKPlViCai6Ymg4mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjkzOTk0YzYtMzQ4NC0z YTc5LTk3MmItZDJiNjExYTdlNzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRViMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx6F1YNuWIQoZhmmlpa6aZIkX06YTR/oajIVkmrR7kRq8P4c7tU1OlL eXPrX0PrIhL8MifKzF80CQDXRcHQmB1iSYLLGVcpVsSjadv9KvtPIl+cHBZ3kqTr dch1C3OgXN47qpRAnQ8pJVxzlQ5+ByYuNRSSzyteZL7jy4VGnTQtX+2Dv46431oa AzLR2ZKhj04wt5V9aGz7Gr79Pu0e44jNq/g9Jqwe6/PVm78bE1yGWSrHw53rJmER kpDn5TA3jlndGCss3wR0WDrvVKF/qzm1OBjzCBrOw+MCn6qGlyMAhX4Kwv2n52mk TVAfru54QjAGqVxgDewimiRhUx9RaNM= -----END CERTIFICATE-----Generated at Thu Mar 26 19:26:48 2026 by rpki-client